Hue 3.11 user access control on S3 storage

We have HUE 3.11 running with HDFS 2.7.3 version. We are working on, how to control HUE user access to S3 storage buckets and folders. Currently all user can see all s3 storage buckets and its folders. Please suggest solution on how we can limit access to S3 storage based on user roles.

Re: Hue 3.11 user access control on S3 storage

Hue is currently using Boto API which is not relying on Hadoop for now (andbypassing Sentry). So each user you grant access to S3 will have thepermissions of the S3 credentials.

This is why S3 access currently requires to be a Hue admin or have the S3permission.

In the medium/long term, HttpFs will support S3 and Hue will switch to it.

Current S3 integration in Hue is more focus on transient / single usercluster in the Cloud (to get S3 autocomplete / drag&drop to upload a fileor export results to S3). With HttpFs S3, it will work well for muli useras Sentry permission will be enforced on top of the S3 credentials.

Issue here is how I can control access to S3 buckets and objects based on HUE (3.11) login credentials. I mean when I login to HUE with my credentials, I should see S3 object only i have Privilieges (Read, write,Delete). Appreciate any thoughts to resolve this issue.